search

moxie0 / sslstrip

A tool for exploiting Moxie Marlinspike's SSL "stripping" attack.
http://www.thoughtcrime.org/software/sslstrip/
GNU General Public License v3.0
1.91k stars 428 forks source link

Is this project dead? #16

Closed magnusstubman closed 7 years ago

magnusstubman commented 9 years ago

@moxie0 what's going on? Is this project dead?

ngalongc commented 8 years ago

Pretty much the same as dead after HSTS came in place. Almost all major website are using HSTS to prevent https->http directly. But the project has rebirth in sslstrip2 in order to defeat HSTS. And the project clone is here. https://github.com/byt3bl33d3r/sslstrip2

sol-vin commented 8 years ago

Ty for the info @ngalongc! Loved this tool but forced HTTPS made the attack impossible. Glad to see someone is trying to make it work again,

matrixfox commented 8 years ago

This project is deeeeaaaaaaaaad...